| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: cpio | Distribution: openSUSE Tumbleweed |
| Version: 2.15 | Vendor: openSUSE |
| Release: 10.1 | Build date: Mon Oct 26 11:48:01 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 354736 | Source RPM: cpio-2.15-10.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://www.gnu.org/software/cpio/cpio.html | |
| Summary: A Backup and Archiving Utility | |
GNU cpio is a program to manage archives of files. Cpio copies files into or out of a cpio or tar archive. An archive is a file that contains other files plus information about them, such as their pathname, owner, time stamps, and access permissions. The archive can be another file on the disk, a magnetic tape, or a pipe.
GPL-3.0-only
* Mon Oct 26 2026 Tomáš Chvátal <tomas.chvatal@gmail.com>
- Remove the leftover update-alternatives %post fragment and its
Requires(post) from the mt subpackage. cpio-mt migrated away from
update-alternatives to a Conflicts strategy (bsc#1240092) and the
SLE 16 band already ships without the fragment (jsc#PED-15643);
as written it could never fire, since it deregisters the
alternative only when gnumt is absent, while cpio-mt’s own %post
always runs with gnumt installed
- Annotate the two %ghost files of the mt subpackage with %attr
(0755 for the /usr/bin/mt symlink path, 0644 for its man page)
to silence the zero-permission ghost warnings; the ghosts stay
so a stale /usr/bin/mt keeps an owning package
- Drop the obsolete Group tags and the commented-out install-info
prereq lines
* Sun Aug 30 2026 Bernhard Wiedemann <bwiedemann@suse.de>
- Adjust doc mtime for reproducible cpio.info (boo#1047218)
- Change cpio-use_new_ascii_format.patch to get the doc change into the package
* Mon Aug 24 2026 Antonio Teixeira <antonio.teixeira@suse.com>
- Fix CVE-2026-66484: path traversal allows creating hard links outside
intended directory via malicious tar archives (bsc#1274856)
* CVE-2026-66484.patch
- Fix CVE-2026-66485: denial of service via uncontrolled memory allocation
from crafted archives (bsc#1274857)
* CVE-2026-66485.patch
- Fix CVE-2026-66486: terminal control sequence injection via crafted
archive member names (bsc#1274858)
* CVE-2026-66486.patch
- Refresh patches to apply with -p1:
* cpio-close_files_after_copy.patch
* cpio-default_tape_dev.patch
* cpio-dev_number.patch
* cpio-eof_tape_handling.patch
* cpio-open_nonblock.patch
* cpio-use_new_ascii_format.patch
* cpio-use_sbin_rmt.patch
- Reorder patches, apply with %autosetup -p1
- Add makeinfo build requirement
* Mon Mar 02 2026 Antonio Teixeira <antonio.teixeira@suse.com>
- Remove update-alternatives %post scripts for SLES 16.x future releases
(jsc#PED-15643, bsc#1245890)
* Wed Jun 11 2025 Fabian Vogt <fvogt@suse.com>
- Downgrade cpio-mt and rmt recommends to suggests (boo#1244434)
* Thu May 29 2025 Martin Schreiner <martin.schreiner@suse.com>
- Migrate away from update-alternatives (bsc#1240092).
cpio-mt now conflicts with other providers of /usr/bin/mt.
- Upon installation of the newer packages, the cpio-mt alternatives
are purged from the system.
* Fri Mar 21 2025 Richard Biener <rguenther@suse.com>
- Use -std=gnu11 to avoid extra diagnostics when calling an
unprototyped function which is no longer possible with C23,
the new default with GCC 15.
* Fri Apr 05 2024 Danilo Spinella <danilo.spinella@suse.com>
- Fix build with gcc14, bsc#1221712
* fix-gcc14.patch
* Mon Feb 26 2024 Danilo Spinella <danilo.spinella@suse.com>
- Use %autopatch instead of deprecated %patchN.
* Mon Feb 05 2024 Danilo Spinella <danilo.spinella@suse.com>
- Update to 2.15:
* Fix the operation of --no-absolute-filenames --make-directories.
* Restore access and modification times of symlinks in copy-in and
copy-pass modes.
- Remove fix-operation-no-absolute-filenames.patch
* Mon Jul 10 2023 Danilo Spinella <danilo.spinella@suse.com>
- Backport upstream fix for --no-absolute-filenames --make-directories
* fix-operation-no-absolute-filenames.patch
* Fri Jun 23 2023 Danilo Spinella <danilo.spinella@suse.com>
- Update to 2.14:
* New option --ignore-dirnlink
Valid in copy-out mode, it instructs cpio to ignore the actual number of
links reported for each directory member and always store 2 instead.
* Changes in --reproducible option
The --reproducible option implies --ignore-dirlink. In other words, it is
equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes.
* Use GNU ls algorithm for deciding timestamp format in -tv mode
* Fix cpio header verification.
* Fix handling of device numbers on copy out.
* Fix calculation of CRC in copy-out mode.
* Rewrite the fix for CVE-2015-1197
* Fix combination of --create --append --directory.
* Fix appending to archives bigger than 2G.
- Refresh patches:
* cpio-open_nonblock.patch
* cpio-dev_number.patch
* cpio-default_tape_dev.patch
* cpio-pattern-file-sigsegv.patch
- Remove patches:
* cpio-revert-CVE-2015-1197-fix.patch
* fix-CVE-2021-38185.patch
* fix-CVE-2021-38185_2.patch
* fix-CVE-2021-38185_3.patch
- Fix CVE-2023-7207, path traversal vulnerability, bsc#1218571
/usr/bin/cpio /usr/share/doc/packages/cpio /usr/share/doc/packages/cpio/ChangeLog /usr/share/doc/packages/cpio/NEWS /usr/share/info/cpio.info.gz /usr/share/licenses/cpio /usr/share/licenses/cpio/COPYING /usr/share/man/man1/cpio.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Nov 12 22:47:30 2026